Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/9976a212-9db8-37cf-bc78-60a6ec4d12e7.roa
File:                     9976a212-9db8-37cf-bc78-60a6ec4d12e7.roa (raw, json)
Hash identifier:          wxrYfy4rd2tvYE2wwszA2o0VPiiHppKITqFMxr4mTqI=
Subject key identifier:   D1:D3:B8:4D:FA:F8:83:CC:CA:3E:37:14:32:8B:99:15:11:5B:6C:73
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584DF4DBA1C9E6729C902C6423E0
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/9976a212-9db8-37cf-bc78-60a6ec4d12e7.roa
Signing time:             Tue 26 May 2026 01:00:24 +0000
ROA not before:           Tue 26 May 2026 01:00:24 +0000
ROA not after:            Mon 24 Aug 2026 01:00:24 +0000
asID:                     81
IP address blocks:        152.45.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f4:db:a1:c9:e6:72:9c:90:2c:64:23:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: May 26 01:00:24 2026 GMT
            Not After : Aug 24 01:00:24 2026 GMT
        Subject: CN=7d16cdb3-f7b3-4980-bb9e-9e9d820a1ff2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:dd:50:04:e8:38:87:90:ad:0e:61:ae:cd:6f:
                    61:c4:c7:18:de:8b:18:46:be:27:8b:e6:87:59:c4:
                    25:d8:98:52:a0:7e:a8:3d:ca:46:53:ea:b6:50:60:
                    ac:0c:24:81:6a:ad:60:a9:d6:45:3a:f7:c3:41:15:
                    0c:4e:f1:f7:97:46:7f:dd:69:30:2b:b9:3a:59:38:
                    95:93:5e:28:33:a7:c1:4b:3b:46:03:b7:fc:60:0c:
                    3e:13:e9:e3:74:6a:2b:8d:1b:63:b4:d6:b0:eb:7e:
                    89:61:09:d4:6b:b1:75:53:3c:17:28:3d:d7:d9:67:
                    78:7f:79:55:ff:e0:69:4c:24:a4:79:17:07:f1:cd:
                    5f:6a:90:04:7c:f6:39:b2:30:cc:06:a7:47:e9:17:
                    8e:88:f1:e5:ce:40:57:dd:f1:af:e3:3d:7f:66:7d:
                    42:96:f2:03:75:3c:b1:67:1f:b4:8c:6b:58:d3:6c:
                    ec:f2:23:ec:79:36:41:0f:64:db:3a:91:86:19:7a:
                    d2:41:39:3d:9c:ae:84:03:78:c0:45:0f:db:c5:5b:
                    f7:92:2c:ea:6e:1b:ef:67:6b:7e:e3:52:e3:c0:bf:
                    06:72:5e:c1:0f:d7:65:cd:0e:9a:25:53:0b:a6:3f:
                    da:9b:4f:f5:16:43:3c:cc:0e:b2:58:b6:63:f7:72:
                    49:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:D3:B8:4D:FA:F8:83:CC:CA:3E:37:14:32:8B:99:15:11:5B:6C:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/9976a212-9db8-37cf-bc78-60a6ec4d12e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.45.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:b1:e5:54:5f:7e:f8:1a:05:b3:f8:31:47:c3:bf:c0:f8:70:
         70:1e:8d:6e:da:c4:93:6c:90:a9:a7:f8:0e:6e:41:4d:e2:85:
         c9:f1:20:5f:1e:f8:cb:f2:54:05:bd:c5:7c:a5:93:cb:b8:68:
         53:34:7b:c5:ec:21:b5:d6:b8:05:67:d8:5a:0b:35:02:36:26:
         12:6f:b7:fc:b9:95:ad:94:19:69:2e:9f:80:77:65:6b:d4:29:
         e2:99:fe:c0:18:0a:b8:26:53:ed:ea:47:d6:b8:40:4e:2a:5a:
         e4:e0:3e:96:57:93:6f:cc:08:3d:89:d8:63:00:10:02:28:49:
         b3:c1:9c:38:f6:22:1e:d3:c9:6f:46:e5:13:4c:9a:f1:67:fd:
         98:f1:11:f7:62:6b:2a:3e:bb:fd:6d:cd:ff:ac:9f:3e:c3:37:
         69:20:16:6a:87:e3:ec:bf:77:1d:bd:37:e7:be:de:5b:ea:c2:
         54:7b:a6:d1:c8:98:66:67:ba:a2:be:0a:e1:e4:c1:07:c8:fc:
         9f:a0:81:93:9a:52:61:d7:a6:d0:b6:01:c1:80:b1:41:44:27:
         c6:0a:24:72:6d:10:a1:58:3e:59:92:55:7d:86:a5:96:03:b2:
         24:40:d3:2c:c5:24:d0:b8:cf:28:a5:77:c1:f1:13:90:84:d4:
         a8:20:59:f6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3026HJ5nKckCxkI+AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh
YTZhMB4XDTI2MDUyNjAxMDAyNFoXDTI2MDgyNDAxMDAyNFowLzEtMCsGA1UEAxMk
N2QxNmNkYjMtZjdiMy00OTgwLWJiOWUtOWU5ZDgyMGExZmYyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyN1QBOg4h5CtDmGuzW9hxMcY3osYRr4ni+aH
WcQl2JhSoH6oPcpGU+q2UGCsDCSBaq1gqdZFOvfDQRUMTvH3l0Z/3WkwK7k6WTiV
k14oM6fBSztGA7f8YAw+E+njdGorjRtjtNaw636JYQnUa7F1UzwXKD3X2Wd4f3lV
/+BpTCSkeRcH8c1fapAEfPY5sjDMBqdH6ReOiPHlzkBX3fGv4z1/Zn1ClvIDdTyx
Zx+0jGtY02zs8iPseTZBD2TbOpGGGXrSQTk9nK6EA3jARQ/bxVv3kizqbhvvZ2t+
41LjwL8Gcl7BD9dlzQ6aJVMLpj/am0/1FkM8zA6yWLZj93JJDQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNHTuE36+IPMyj43FDKLmRURW2xzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy
YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvOTk3NmEyMTItOWRiOC0z
N2NmLWJjNzgtNjBhNmVjNGQxMmU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj
OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz
YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi
OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmC0IMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB+x5VRffvgaBbP4MUfDv8D4cHAejW7axJNskKmn+A5uQU3ihcnxIF8e
+MvyVAW9xXylk8u4aFM0e8XsIbXWuAVn2FoLNQI2JhJvt/y5la2UGWkun4B3ZWvU
KeKZ/sAYCrgmU+3qR9a4QE4qWuTgPpZXk2/MCD2J2GMAEAIoSbPBnDj2Ih7TyW9G
5RNMmvFn/ZjxEfdiayo+u/1tzf+snz7DN2kgFmqH4+y/dx29N+e+3lvqwlR7ptHI
mGZnuqK+CuHkwQfI/J+ggZOaUmHXptC2AcGAsUFEJ8YKJHJtEKFYPlmSVX2GpZYD
siRA0yzFJNC4zyild8HxE5CE1KggWfY=
-----END CERTIFICATE-----
Generated at Sat Jun 13 16:06:57 2026 by rpki-client